Browse Source

SEC-1223: Added break to bindWithDnLoop when non-null use is returned.

Luke Taylor 16 năm trước cách đây
mục cha
commit
d47abbc35f

+ 4 - 0
ldap/src/main/java/org/springframework/security/ldap/authentication/BindAuthenticator.java

@@ -80,6 +80,10 @@ public class BindAuthenticator extends AbstractLdapAuthenticator {
         // If DN patterns are configured, try authenticating with them directly
         for (String dn : getUserDns(username)) {
             user = bindWithDn(dn, username, password);
+
+            if (user != null) {
+                break;
+            }
         }
 
         // Otherwise use the configured search object to find the user and authenticate with the returned DN.